$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143070.roa File: AS143070.roa (raw, json) Hash identifier: kPrSkJXseeX93yLOHNdqFpP76W86lljiBwku2XH8oXM= Subject key identifier: 39:1D:B3:D9:0A:D3:79:F9:7F:27:A8:48:A6:6E:87:64:D1:0B:7B:14 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 71AD8DDBD2D80C9337AA6497999D55CEEEA24D42 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143070.roa Signing time: Wed 04 Mar 2026 06:07:31 +0000 ROA not before: Wed 04 Mar 2026 06:02:31 +0000 ROA not after: Wed 03 Mar 2027 06:07:31 +0000 asID: 143070 IP address blocks: 240a:a1a4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ad:8d:db:d2:d8:0c:93:37:aa:64:97:99:9d:55:ce:ee:a2:4d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:31 2026 GMT Not After : Mar 3 06:07:31 2027 GMT Subject: CN=391DB3D90AD379F97F27A848A66E8764D10B7B14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:15:d4:55:48:07:70:91:10:35:01:9f:f1:ed: ec:c6:ed:70:31:95:f1:bf:c5:c3:85:83:18:6c:57: 47:97:fe:11:b2:d7:2d:e2:9b:f5:ae:be:6b:cc:58: 1b:83:b6:21:14:c3:55:b7:d8:0b:e4:1f:75:66:46: 9e:d0:4a:71:0c:c3:6a:e6:e1:2b:f4:8e:57:7d:43: 6c:64:c2:02:4d:b0:b7:97:3c:43:40:de:fa:c7:2c: 29:1a:08:d2:6f:a7:a3:12:be:69:a4:4e:5f:fd:20: e5:22:e1:22:42:13:c3:8b:e0:50:4e:f4:06:ef:82: e6:16:90:26:f6:b1:48:83:ba:12:c5:55:b4:8b:6c: bc:1b:eb:da:ce:9f:a9:48:13:8c:68:8b:a1:76:54: db:53:42:65:ab:a7:01:ad:68:b0:5b:f2:72:d7:37: 32:36:4f:3f:c4:04:fa:72:62:35:94:1d:58:66:eb: bf:19:56:b0:f4:d8:16:a7:b4:3c:90:d9:8c:79:40: 15:c5:fd:9f:e8:93:b3:5e:13:5a:2c:5a:5b:a1:88: d2:44:56:9d:39:31:96:75:80:f8:d8:60:5a:ee:8c: c1:c7:e3:98:36:76:fd:20:59:8a:73:4d:ad:e2:10: a2:f5:47:e7:54:20:03:aa:07:af:70:23:6f:9f:d6: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1D:B3:D9:0A:D3:79:F9:7F:27:A8:48:A6:6E:87:64:D1:0B:7B:14 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143070.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a1a4::/32 Signature Algorithm: sha256WithRSAEncryption 1c:a0:f5:06:40:7a:71:fc:99:76:65:89:3f:0c:05:04:02:1a: d7:b3:8b:dc:e1:21:7d:fb:0a:cb:d1:40:30:cd:5d:98:4a:8e: b9:90:a7:19:a6:4c:d9:a7:a0:c4:de:c4:4a:b9:91:42:63:21: 39:16:23:88:bc:25:67:fc:84:25:41:c6:52:2c:56:76:a0:fc: 72:1b:33:1e:bc:c6:f7:ef:02:ca:a1:f4:e2:33:ec:aa:f3:fe: f1:d5:1a:d3:0c:f8:0b:5b:37:03:e1:36:59:ad:ea:16:41:d8: b2:cf:08:39:14:15:18:10:a1:cb:9c:c5:68:67:84:ac:93:0f: 20:a4:fe:27:c4:59:01:96:6f:fd:fc:86:09:1f:45:7d:a0:6d: 4d:11:b3:8d:3b:b1:79:f0:be:a8:c8:3d:dc:fb:51:b7:fc:23: 87:42:97:cd:96:12:5b:b3:5c:92:a8:58:e6:7b:1b:98:e5:e3: b2:ad:a5:10:32:8d:7c:84:ea:c6:3b:a0:8e:77:d6:5e:98:96: ef:ea:5c:7d:8b:ec:7d:5d:56:30:0e:f4:b8:1e:49:cf:46:f8: 28:9c:7d:d7:ea:d2:32:65:19:ba:6e:b0:bb:32:b2:bb:66:69: 1e:0d:ae:2f:1c:f1:5c:9f:3e:f1:3d:97:73:54:52:09:d0:e3: 18:04:18:00 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUca2N29LYDJM3qmSXmZ1Vzu6iTUIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDIzMVoX DTI3MDMwMzA2MDczMVowMzExMC8GA1UEAxMoMzkxREIzRDkwQUQzNzlGOTdGMjdB ODQ4QTY2RTg3NjREMTBCN0IxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMV1FVIB3CREDUBn/Ht7MbtcDGV8b/Fw4WDGGxXR5f+EbLXLeKb9a6+a8xY G4O2IRTDVbfYC+QfdWZGntBKcQzDaubhK/SOV31DbGTCAk2wt5c8Q0De+scsKRoI 0m+noxK+aaROX/0g5SLhIkITw4vgUE70Bu+C5haQJvaxSIO6EsVVtItsvBvr2s6f qUgTjGiLoXZU21NCZaunAa1osFvyctc3MjZPP8QE+nJiNZQdWGbrvxlWsPTYFqe0 PJDZjHlAFcX9n+iTs14TWixaW6GI0kRWnTkxlnWA+NhgWu6MwcfjmDZ2/SBZinNN reIQovVH51QgA6oHr3Ajb5/WQ4UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQ5HbPZ CtN5+X8nqEimbodk0Qt7FDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oaQwDQYJKoZIhvcNAQELBQADggEBAByg9QZAenH8mXZliT8MBQQCGtezi9zhIX37 CsvRQDDNXZhKjrmQpxmmTNmnoMTexEq5kUJjITkWI4i8JWf8hCVBxlIsVnag/HIb Mx68xvfvAsqh9OIz7Krz/vHVGtMM+AtbNwPhNlmt6hZB2LLPCDkUFRgQocucxWhn hKyTDyCk/ifEWQGWb/38hgkfRX2gbU0Rs407sXnwvqjIPdz7Ubf8I4dCl82WEluz XJKoWOZ7G5jl47KtpRAyjXyE6sY7oI531l6Ylu/qXH2L7H1dVjAO9LgeSc9G+Cic fdfq0jJlGbpusLsysrtmaR4Nri8c8VyfPvE9l3NUUgnQ4xgEGAA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:59 2026 by rpki-client